{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,5,29]],"date-time":"2025-05-29T13:48:00Z","timestamp":1748526480578,"version":"3.40.3"},"publisher-location":"Cham","reference-count":24,"publisher":"Springer International Publishing","isbn-type":[{"type":"print","value":"9783030681531"},{"type":"electronic","value":"9783030681548"}],"license":[{"start":{"date-parts":[[2021,1,1]],"date-time":"2021-01-01T00:00:00Z","timestamp":1609459200000},"content-version":"tdm","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"},{"start":{"date-parts":[[2021,1,1]],"date-time":"2021-01-01T00:00:00Z","timestamp":1609459200000},"content-version":"vor","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2021]]},"DOI":"10.1007\/978-3-030-68154-8_42","type":"book-chapter","created":{"date-parts":[[2021,2,9]],"date-time":"2021-02-09T04:47:45Z","timestamp":1612846065000},"page":"463-475","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":5,"title":["Models for Forming Knowledge Databases for Decision Support Systems for Recognizing Cyberattacks"],"prefix":"10.1007","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-9695-4543","authenticated-orcid":false,"given":"Valery","family":"Lakhno","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-5622-2233","authenticated-orcid":false,"given":"Bakhytzhan","family":"Akhmetov","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-5680-5444","authenticated-orcid":false,"given":"Moldyr","family":"Ydyryshbayeva","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6599-0808","authenticated-orcid":false,"given":"Bohdan","family":"Bebeshko","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-2284-3418","authenticated-orcid":false,"given":"Alona","family":"Desiatko","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-3270-4494","authenticated-orcid":false,"given":"Karyna","family":"Khorolska","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2021,2,8]]},"reference":[{"issue":"7","key":"42_CR1","doi-asserted-by":"publisher","first-page":"4349","DOI":"10.1016\/j.asoc.2010.12.004","volume":"11","author":"HT Elshoush","year":"2011","unstructured":"Elshoush, H.T., Osman, I.M.: Alert correlation in collaborative intelligent intrusion detection systems\u2013a survey. Appl. Soft Comput. 11(7), 4349\u20134365 (2011)","journal-title":"Appl. Soft Comput."},{"issue":"2","key":"42_CR2","doi-asserted-by":"publisher","first-page":"95","DOI":"10.1016\/j.icte.2018.04.003","volume":"4","author":"A Shenfield","year":"2018","unstructured":"Shenfield, A., Day, D., Ayesh, A.: Intelligent intrusion detection systems using artificial neural networks. ICT Express 4(2), 95\u201399 (2018)","journal-title":"ICT Express"},{"issue":"3","key":"42_CR3","doi-asserted-by":"publisher","first-page":"493","DOI":"10.1016\/j.dss.2011.02.013","volume":"51","author":"LP Rees","year":"2011","unstructured":"Rees, L.P., Deane, J.K., Rakes, T.R., Baker, W.H.: Decision support for Cybersecurity risk planning. Decis. Support Syst. 51(3), 493\u2013505 (2011)","journal-title":"Decis. Support Syst."},{"key":"42_CR4","doi-asserted-by":"crossref","unstructured":"Akhmetov, B., Lakhno, V., Boiko, Y., & Mishchenko, A.: Designing a decision support system for the weakly formalized problems in the provision of cybersecurity. Eastern-Eur. J. Enterp. Technol. (1(2)), 4\u201315 (2017)","DOI":"10.15587\/1729-4061.2017.90506"},{"key":"42_CR5","doi-asserted-by":"publisher","first-page":"13","DOI":"10.1016\/j.dss.2016.02.012","volume":"86","author":"A Fielder","year":"2016","unstructured":"Fielder, A., Panaousis, E., Malacaria, P., Hankin, C., Smeraldi, F.: Decision support approaches for cybersecurity investment. Decis. Support Syst. 86, 13\u201323 (2016)","journal-title":"Decis. Support Syst."},{"key":"42_CR6","doi-asserted-by":"crossref","unstructured":"Atymtayeva, L., Kozhakhmet, K., Bortsova, G.: Building a knowledge base for expert system in information security. In: Chapter Soft Computing in Artificial Intelligence of the series Advances in Intelligent Systems and Computing, vol. 270, pp. 57\u201376 (2014)","DOI":"10.1007\/978-3-319-05515-2_7"},{"key":"42_CR7","doi-asserted-by":"crossref","unstructured":"Dua S., Du, X.: Data Mining and Machine Learning in Cybersecurity, p. 225. CRC Press (2016)","DOI":"10.1201\/b10867"},{"issue":"2","key":"42_CR8","doi-asserted-by":"publisher","first-page":"1153","DOI":"10.1109\/COMST.2015.2494502","volume":"18","author":"AL Buczak","year":"2016","unstructured":"Buczak, A.L., Guven, E.: A Survey of data mining and machine learning methods for cyber security intrusion detection. IEEE Commun. Surv. Tutor. 18(2), 1153\u20131176 (2016)","journal-title":"IEEE Commun. Surv. Tutor."},{"issue":"10","key":"42_CR9","first-page":"1236","volume":"51","author":"L Zhang","year":"2011","unstructured":"Zhang, L., Yao, Y., Peng, J., Chen, H., Du, Y.: Intelligent information security risk assessment based on a decision tree algorithm. J. Tsinghua Univ. Sci. Technol. 51(10), 1236\u20131239 (2011)","journal-title":"J. Tsinghua Univ. Sci. Technol."},{"key":"42_CR10","doi-asserted-by":"publisher","first-page":"51","DOI":"10.1016\/j.chb.2015.01.039","volume":"48","author":"N Ben-Asher","year":"2015","unstructured":"Ben-Asher, N., Gonzalez, C.: Effects of cybersecurity knowledge on attack detection. Comput. Hum. Behav. 48, 51\u201361 (2015)","journal-title":"Comput. Hum. Behav."},{"issue":"1","key":"42_CR11","first-page":"13","volume":"1","author":"K Goztepe","year":"2012","unstructured":"Goztepe, K.: Designing fuzzy rule based expert system for cyber security. Int. J. Inf. Secur. Sci. 1(1), 13\u201319 (2012)","journal-title":"Int. J. Inf. Secur. Sci."},{"issue":"6","key":"42_CR12","first-page":"505","volume":"4","author":"MM Gamal","year":"2011","unstructured":"Gamal, M.M., Hasan, B., Hegazy, A.F.: A Security analysis framework powered by an expert system. Int. J. Comput. Sci. Secur. (IJCSS) 4(6), 505\u2013527 (2011)","journal-title":"Int. J. Comput. Sci. Secur. (IJCSS)"},{"key":"42_CR13","doi-asserted-by":"crossref","unstructured":"Chang, L.-Y., Lee, Z.-J.: Applying fuzzy expert system to information security risk Assessment \u2013 a case study on an attendance system. In: International Conference on Fuzzy Theory and Its Applications (iFUZZY), pp. 346\u2013351 (2013)","DOI":"10.1109\/iFuzzy.2013.6825462"},{"key":"42_CR14","doi-asserted-by":"crossref","unstructured":"Kanatov, M., Atymtayeva, L., Yagaliyeva, B.: Expert systems for information security management and audit, Implementation phase issues, Soft Computing and Intelligent Systems (SCIS). In: Joint 7th International Conference on and Advanced Intelligent Systems (ISIS), pp. 896\u2013900 (2014)","DOI":"10.1109\/SCIS-ISIS.2014.7044702"},{"issue":"4","key":"42_CR15","doi-asserted-by":"publisher","first-page":"4457","DOI":"10.30534\/ijatcse\/2020\/39942020","volume":"9","author":"VA Lakhno","year":"2020","unstructured":"Lakhno, V.A., Lakhno, M.V., Sauanova, K.T., Sagyndykova, S.N., Adilzhanova, S.A.: Decision support system on optimization of information protection tools placement. Int. J. Adv. Trends Comput. Sci. Eng. 9(4), 4457\u20134464 (2020)","journal-title":"Int. J. Adv. Trends Comput. Sci. Eng."},{"key":"42_CR16","unstructured":"Xie, P., Li, J. H., Ou, X., Liu, P., Levy, R.: Using Bayesian networks for cybersecurity analysis. In: 2010 IEEE\/IFIP International Conference on Dependable Systems & Networks (DSN), pp. 211\u2013220. IEEE, June 2010"},{"key":"42_CR17","doi-asserted-by":"publisher","first-page":"208","DOI":"10.1016\/j.ress.2014.10.006","volume":"134","author":"J Shin","year":"2015","unstructured":"Shin, J., Son, H., Heo, G.: Development of a cybersecurity risk model using Bayesian networks. Reliab. Eng. Syst. Saf. 134, 208\u2013217 (2015)","journal-title":"Reliab. Eng. Syst. Saf."},{"key":"42_CR18","doi-asserted-by":"crossref","unstructured":"\u00d6zg\u00fcr, A., Erdem, H.: A review of KDD99 dataset usage in intrusion detection and machine learning between 2010 and 2015. PeerJ Preprints, 4, e1954v1 (2016)","DOI":"10.7287\/peerj.preprints.1954"},{"issue":"2","key":"42_CR19","doi-asserted-by":"publisher","first-page":"63","DOI":"10.1145\/846183.846199","volume":"1","author":"C Elkan","year":"2000","unstructured":"Elkan, C.: Results of the KDD\u201999 classifier learning. ACM SIGKDD Explorat. Newsl. 1(2), 63\u201364 (2000)","journal-title":"ACM SIGKDD Explorat. Newsl."},{"issue":"21","key":"42_CR20","first-page":"5778","volume":"95","author":"VA Lakhno","year":"2017","unstructured":"Lakhno, V.A., Kravchuk, P.U., Malyukov, V.P., Domrachev, V.N., Myrutenko, L.V., Piven, O.S.: Developing of the cybersecurity system based on clustering and formation of control deviation signs. J. Theor. Appl. Inf. Technol. 95(21), 5778\u20135786 (2017)","journal-title":"J. Theor. Appl. Inf. Technol."},{"issue":"2","key":"42_CR21","first-page":"352","volume":"89","author":"VA Lakhno","year":"2016","unstructured":"Lakhno, V.A., Hrabariev, A.V., Petrov, O.S., Ivanchenko, Y.V., Beketova, G.S.: Improving of information transport security under the conditions of destructive influence on the information-communication system. J. Theort. Appl. Inf. Technol. 89(2), 352\u2013361 (2016)","journal-title":"J. Theort. Appl. Inf. Technol."},{"key":"42_CR22","unstructured":"Heckerman, D.: A tutorial on learning with bayesian networks, Tecnical report, Redmond: Microsoft Research (1995). 58 p."},{"issue":"1","key":"42_CR23","doi-asserted-by":"publisher","first-page":"77","DOI":"10.1023\/B:AMAI.0000018580.96245.c6","volume":"41","author":"LE Raileanu","year":"2004","unstructured":"Raileanu, L.E., Stoffel, K.: Theoretical comparison between the gini index and information gain criteria. Ann. Math. Artif. Intell. 41(1), 77\u201393 (2004)","journal-title":"Ann. Math. Artif. Intell."},{"key":"42_CR24","doi-asserted-by":"publisher","unstructured":"Alhendawi, K.M., Al-Janabi, A.A.: An intelligent expert system for management information system failure diagnosis. In: Vasant, P., Zelinka, I., Weber, G.W. (eds.) Intelligent Computing & Optimization. ICO 2018. Advances in Intelligent Systems and Computing, vol. 866. Springer, Cham (2019). https:\/\/doi.org\/10.1007\/978-3-030-00979-3_26","DOI":"10.1007\/978-3-030-00979-3_26"}],"container-title":["Advances in Intelligent Systems and Computing","Intelligent Computing and Optimization"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-030-68154-8_42","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2021,5,14]],"date-time":"2021-05-14T17:16:56Z","timestamp":1621012616000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-030-68154-8_42"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2021]]},"ISBN":["9783030681531","9783030681548"],"references-count":24,"URL":"https:\/\/doi.org\/10.1007\/978-3-030-68154-8_42","relation":{},"ISSN":["2194-5357","2194-5365"],"issn-type":[{"type":"print","value":"2194-5357"},{"type":"electronic","value":"2194-5365"}],"subject":[],"published":{"date-parts":[[2021]]},"assertion":[{"value":"8 February 2021","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"ICO","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"International Conference on Intelligent Computing & Optimization","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Koh Samui","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Thailand","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2020","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"17 December 2020","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"18 December 2020","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"ico0","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}}]}}