{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,2,19]],"date-time":"2026-02-19T02:03:21Z","timestamp":1771466601498,"version":"3.50.1"},"publisher-location":"Cham","reference-count":23,"publisher":"Springer Nature Switzerland","isbn-type":[{"value":"9783031766039","type":"print"},{"value":"9783031766046","type":"electronic"}],"license":[{"start":{"date-parts":[[2024,11,17]],"date-time":"2024-11-17T00:00:00Z","timestamp":1731801600000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2024,11,17]],"date-time":"2024-11-17T00:00:00Z","timestamp":1731801600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2025]]},"DOI":"10.1007\/978-3-031-76604-6_16","type":"book-chapter","created":{"date-parts":[[2024,11,16]],"date-time":"2024-11-16T00:17:05Z","timestamp":1731716225000},"page":"219-232","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":1,"title":["Predicting Next Phases of\u00a0Multi-Stage Network Attacks: A Comparative Study of\u00a0Statistical and\u00a0Deep-Learning Models"],"prefix":"10.1007","author":[{"given":"Antonia","family":"Sever\u00edn","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Claudio","family":"Canales","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Romina","family":"Torres","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"C\u00e9sar","family":"Roudergue","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Rodrigo","family":"Salas","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2024,11,17]]},"reference":[{"key":"16_CR1","unstructured":"ISO\/IEC. ISO\/EIC 27000:2018 Information technology - Security techniques - Information security management systems - Overview and vocabulary. ISO, 5\u00a0edn. (2018)"},{"key":"16_CR2","doi-asserted-by":"crossref","unstructured":"Levshun, D., Kotenko, I.: A survey on artificial intelligence techniques for security event correlation: models, challenges, and opportunities. Artif. Intell. Rev., 1\u201344 (2023)","DOI":"10.21203\/rs.3.rs-1975426\/v1"},{"key":"16_CR3","unstructured":"Hutchins, E.M., Cloppert, M.J., Amin, R.M., et al.: Intelligence-driven computer network defense informed by analysis of adversary campaigns and intrusion kill chains. In: Leading Issues in Information Warfare & Security Research, vol. 1, no. 1, p. 80 (2011)"},{"issue":"5","key":"16_CR4","first-page":"1","volume":"9","author":"S Singh","year":"2009","unstructured":"Singh, S., Silakari, S.: A survey of cyber attack detection systems. Int. J. Comput. Sci. Netw. Secur. 9(5), 1\u201310 (2009)","journal-title":"Int. J. Comput. Sci. Netw. Secur."},{"issue":"1","key":"16_CR5","doi-asserted-by":"publisher","first-page":"164","DOI":"10.1214\/aoms\/1177697196","volume":"41","author":"LE Baum","year":"1970","unstructured":"Baum, L.E., Petrie, T., Soules, G., Weiss, N.: A maximization technique occurring in the statistical analysis of probabilistic functions of Markov chains. Ann. Math. Stat. 41(1), 164\u2013171 (1970)","journal-title":"Ann. Math. Stat."},{"issue":"2","key":"16_CR6","doi-asserted-by":"publisher","first-page":"257","DOI":"10.1109\/5.18626","volume":"77","author":"LR Rabiner","year":"1989","unstructured":"Rabiner, L.R.: A tutorial on hidden Markov models and selected applications in speech recognition. Proc. IEEE 77(2), 257\u2013286 (1989)","journal-title":"Proc. IEEE"},{"key":"16_CR7","doi-asserted-by":"publisher","first-page":"636","DOI":"10.1016\/j.future.2020.03.014","volume":"108","author":"T Chadza","year":"2020","unstructured":"Chadza, T., Kyriakopoulos, K.G., Lambotharan, S.: Analysis of hidden Markov model learning algorithms for the detection and prediction of multi-stage network attacks. Futur. Gener. Comput. Syst. 108, 636\u2013649 (2020)","journal-title":"Futur. Gener. Comput. Syst."},{"issue":"2","key":"16_CR8","doi-asserted-by":"publisher","first-page":"15","DOI":"10.1002\/cplx.20001","volume":"9","author":"T Hughes","year":"2003","unstructured":"Hughes, T., Sheyner, O.: Attack scenario graphs for computer network threat analysis and prediction. Complexity 9(2), 15\u201318 (2003)","journal-title":"Complexity"},{"key":"16_CR9","doi-asserted-by":"crossref","unstructured":"Li, Z.-T., Lei, J., Wang, L., Li, D.: A data mining approach to generating network attack graph for intrusion prediction. In: Fourth International Conference on Fuzzy Systems and Knowledge Discovery (FSKD 2007), vol.\u00a04, pp.\u00a0307\u2013311. IEEE (2007)","DOI":"10.1109\/FSKD.2007.15"},{"key":"16_CR10","doi-asserted-by":"crossref","unstructured":"Martinez, V., Salas, R., Tessini, O., Torres, R.: Machine learning techniques for behavioral feature selection in network intrusion detection systems. IET (2021)","DOI":"10.1049\/icp.2021.1448"},{"key":"16_CR11","doi-asserted-by":"crossref","unstructured":"Torres, R., Solis, M.A., Mart\u00ednez, V., Salas, R.: A nested-cascade machine learning based model for intrusion detection systems. In: 2023 IEEE CHILEAN Conference on Electrical, Electronics Engineering, Information and Communication Technologies (CHILECON), pp.\u00a01\u20136 (2023)","DOI":"10.1109\/CHILECON60335.2023.10418750"},{"key":"16_CR12","unstructured":"Data web page of DARPA 2000 LLDOS 1.0. Accessed 15 Mar 2024"},{"key":"16_CR13","unstructured":"Farhadi, H., AmirHaeri, M., Khansari, M.: Alert correlation and prediction using data mining and HMM. ISeCure 3(2) (2011)"},{"issue":"1","key":"16_CR14","doi-asserted-by":"publisher","first-page":"134","DOI":"10.1109\/TDSC.2017.2751478","volume":"17","author":"P Holgado","year":"2017","unstructured":"Holgado, P., Villagr\u00e1, V.A., Vazquez, L.: Real-time multistep attack prediction based on hidden Markov models. IEEE Trans. Dependable Secure Comput. 17(1), 134\u2013147 (2017)","journal-title":"IEEE Trans. Dependable Secure Comput."},{"key":"16_CR15","doi-asserted-by":"crossref","unstructured":"Kholidy, H.A., Erradi, A., Abdelwahed, S., Azab, A.: A finite state hidden Markov model for predicting multistage attacks in cloud systems. In: 2014 IEEE 12th International Conference on Dependable, Autonomic and Secure Computing, pp.\u00a014\u201319. IEEE (2014)","DOI":"10.1109\/DASC.2014.12"},{"key":"16_CR16","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2020.101974","volume":"97","author":"T Li","year":"2020","unstructured":"Li, T., Liu, Y., Liu, Y., Xiao, Y., Nguyen, N.A.: Attack plan recognition using hidden Markov and probabilistic inference. Comput. Secur. 97, 101974 (2020)","journal-title":"Comput. Secur."},{"key":"16_CR17","doi-asserted-by":"crossref","unstructured":"Fan, S., et al.: ALEAP: attention-based LSTM with event embedding for attack projection. In: 2019 IEEE 38th International Performance Computing and Communications Conference (IPCCC), pp.\u00a01\u20138. IEEE (2019)","DOI":"10.1109\/IPCCC47392.2019.8958761"},{"key":"16_CR18","doi-asserted-by":"publisher","first-page":"133","DOI":"10.26797\/rpye.vi141.1028","volume":"141","author":"M Cano","year":"2023","unstructured":"Cano, M., Torres, R.: Caracterizaci\u00f3n de ataques multietapa en ejercicios capture the flag. Revista Pol\u00edtica y Estrategia 141, 133\u2013151 (2023)","journal-title":"Revista Pol\u00edtica y Estrategia"},{"key":"16_CR19","unstructured":"Roesch, M.: Network intrusion detection & prevention system (1998)"},{"key":"16_CR20","unstructured":"Breiman, L., Friedman, J., Stone, C., Olshen, R.: Classification and Regression Trees. Taylor & Francis (1984)"},{"key":"16_CR21","doi-asserted-by":"crossref","unstructured":"Breiman, L.: Random forests. Mach. Learn. 45, 5\u201332 (2001)","DOI":"10.1023\/A:1010933404324"},{"issue":"8","key":"16_CR22","doi-asserted-by":"publisher","first-page":"1735","DOI":"10.1162\/neco.1997.9.8.1735","volume":"9","author":"J Schmidhuber","year":"1997","unstructured":"Schmidhuber, J., Hochreiter, S., et al.: Long short-term memory. Neural Comput. 9(8), 1735\u20131780 (1997)","journal-title":"Neural Comput."},{"key":"16_CR23","doi-asserted-by":"publisher","unstructured":"Aggarwal, C.C.: Neural Networks and Deep Learning, vol. 10, no. 978, p. 3. Springer, Cham (2018). https:\/\/doi.org\/10.1007\/978-3-319-94463-0","DOI":"10.1007\/978-3-319-94463-0"}],"container-title":["Lecture Notes in Computer Science","Progress in Pattern Recognition, Image Analysis, Computer Vision, and Applications"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-031-76604-6_16","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,11,24]],"date-time":"2025-11-24T05:42:51Z","timestamp":1763962971000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-031-76604-6_16"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,11,17]]},"ISBN":["9783031766039","9783031766046"],"references-count":23,"URL":"https:\/\/doi.org\/10.1007\/978-3-031-76604-6_16","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2024,11,17]]},"assertion":[{"value":"17 November 2024","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"The authors have no competing interests to declare that are relevant to the content of this article.","order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Disclosure of Interests"}},{"value":"CIARP","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Iberoamerican Congress on Pattern Recognition","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Talca","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Chile","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2024","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"26 November 2024","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"29 November 2024","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"27","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"ciarp2024","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"http:\/\/www.ciarp24.org","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}}]}}