{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,1,20]],"date-time":"2026-01-20T15:06:08Z","timestamp":1768921568235,"version":"3.49.0"},"publisher-location":"Cham","reference-count":66,"publisher":"Springer International Publishing","isbn-type":[{"value":"9783319456553","type":"print"},{"value":"9783319456560","type":"electronic"}],"license":[{"start":{"date-parts":[[2016,1,1]],"date-time":"2016-01-01T00:00:00Z","timestamp":1451606400000},"content-version":"unspecified","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2016]]},"DOI":"10.1007\/978-3-319-45656-0_20","type":"book-chapter","created":{"date-parts":[[2016,9,7]],"date-time":"2016-09-07T09:56:45Z","timestamp":1473242205000},"page":"239-249","source":"Crossref","is-referenced-by-count":13,"title":["Machine Learning Combining with Visualization for Intrusion Detection: A Survey"],"prefix":"10.1007","author":[{"given":"Yang","family":"Yu","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Jun","family":"Long","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Fang","family":"Liu","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Zhiping","family":"Cai","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2016,9,8]]},"reference":[{"key":"20_CR1","doi-asserted-by":"crossref","first-page":"19","DOI":"10.1016\/j.jnca.2015.11.016","volume":"60","author":"M Ahmed","year":"2016","unstructured":"Ahmed, M., Naser Mahmood, A., Hu, J.: A survey of network anomaly detection techniques. J. Netw. Comput. Appl. 60, 19\u201331 (2016)","journal-title":"J. Netw. Comput. Appl."},{"key":"20_CR2","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1186\/s40537-015-0013-4","volume":"2","author":"R Zuech","year":"2015","unstructured":"Zuech, R., Khoshgoftaar, T.M., Wald, R.: Intrusion detection and big heterogeneous data: a survey. J. Big Data 2, 1\u201341 (2015)","journal-title":"J. Big Data"},{"key":"20_CR3","doi-asserted-by":"crossref","unstructured":"Ektefa, M., Memar, S., Sidi, F., Affendey, L.S.: Intrusion detection using data mining techniques. In: International Conference on Information Retrieval & Knowledge Management, pp. 1\u201314 (2010)","DOI":"10.1109\/INFRKM.2010.5466919"},{"key":"20_CR4","unstructured":"Nguyen, H.: Reliable machine learning algorithms for intrusion detection systems. Ph.D. thesis, Faculty of Computer Science and Media Technology Gj\u00f8vik University College (2012). http:\/\/hdl.handle.net\/11250\/144371 . Accessed August 2015, 2.3. 2, 2.4. 2, 2, 5.3. 3"},{"key":"20_CR5","doi-asserted-by":"crossref","first-page":"9","DOI":"10.14569\/IJARAI.2015.040302","volume":"4","author":"N Farah","year":"2015","unstructured":"Farah, N., Avishek, M., Muhammad, F., Rahman, A., Rafni, M., Md, D.: Application of machine learning approaches in intrusion detection system: a survey. Int. J. Adv. Res. Artif. Intell. 4, 9\u201318 (2015)","journal-title":"Int. J. Adv. Res. Artif. Intell."},{"key":"20_CR6","unstructured":"Kapoor, A., Lee, B., Tan, D., Horvitz, E.: Performance and preferences: interactive refinement of machine learning procedures. In: AAAI Conference on Artificial Intelligence, pp. 113\u2013126 (2015)"},{"key":"20_CR7","doi-asserted-by":"crossref","unstructured":"Bertini, E., Hertzog, P., Lalanne, D.: SpiralView: towards security policies assessment through visual correlation of network resources with evolution of alarms. In: IEEE Symposium on Visual Analytics Science and Technology, 2007, VAST 2007, pp. 139\u2013146. IEEE (2007)","DOI":"10.1109\/VAST.2007.4389007"},{"key":"20_CR8","doi-asserted-by":"crossref","unstructured":"Lakkaraju, K., Yurcik, W., Lee, A.J.: NVisionIP: netflow visualizations of system state for security situational awareness. In: Proceedings of the 2004 ACM Workshop on Visualization and Data Mining for Computer Security, pp. 65\u201372. ACM (2004)","DOI":"10.1145\/1029208.1029219"},{"key":"20_CR9","doi-asserted-by":"crossref","unstructured":"Fischer, F., Fuchs, J., Vervier, P.-A., Mansmann, F., Thonnard, O.: Vistracer: a visual analytics tool to investigate routing anomalies in traceroutes. In: Proceedings of the Ninth International Symposium on visualization for Cyber Security, pp. 80\u201387. ACM (2012)","DOI":"10.1145\/2379690.2379701"},{"key":"20_CR10","first-page":"1","volume":"5","author":"DA Keim","year":"2015","unstructured":"Keim, D.A., Munzner, T., Rossi, F., Verleysen, M., Keim, D.A., Verleysen, M.: Bridging information visualization with machine learning. Dagstuhl Rep. 5, 1\u201327 (2015)","journal-title":"Dagstuhl Rep."},{"key":"20_CR11","unstructured":"Rieck, K.: Machine learning for application-layer intrusion detection. In: Fraunhofer Institute FIRST and Berlin Institute of Technology, Berlin, Germany (2009)"},{"key":"20_CR12","doi-asserted-by":"crossref","first-page":"227","DOI":"10.1145\/382912.382914","volume":"3","author":"W Lee","year":"2000","unstructured":"Lee, W., Stolfo, S.J.: A framework for constructing features and models for intrusion detection systems. ACM Trans. Inf. Syst. Secur. 3, 227\u2013261 (2000)","journal-title":"ACM Trans. Inf. Syst. Secur."},{"key":"20_CR13","first-page":"8","volume":"99","author":"A Kumarshrivas","year":"2014","unstructured":"Kumarshrivas, A., Kumar Dewangan, A.: An ensemble model for classification of attacks with feature selection based on KDD99 and NSL-KDD data set. Int. J. Comput. Appl. 99, 8\u201313 (2014)","journal-title":"Int. J. Comput. Appl."},{"key":"20_CR14","first-page":"77","volume":"6","author":"E Eskin","year":"2002","unstructured":"Eskin, E., Arnold, A., Prerau, M., Portnoy, L., Stolfo, S.: A geometric framework for unsupervised anomaly detection. Appl. Data Min. Comput. Sec. 6, 77\u2013101 (2002)","journal-title":"Appl. Data Min. Comput. Sec."},{"key":"20_CR15","unstructured":"Fan, W., Miller, M., Stolfo, S., Lee, W., Chan, P.: Using artificial anomalies to detect unknown and known network intrusions. In: IEEE International Conference on Data Mining, ICDM, pp. 123\u2013130 (2001)"},{"key":"20_CR16","doi-asserted-by":"crossref","first-page":"243","DOI":"10.1007\/s11416-006-0030-0","volume":"2","author":"K Rieck","year":"2007","unstructured":"Rieck, K., Laskov, P.: Language models for detection of unknown attacks in network traffic. J. Comput. Virol. 2, 243\u2013256 (2007)","journal-title":"J. Comput. Virol."},{"key":"20_CR17","first-page":"23","volume":"9","author":"K Rieck","year":"2008","unstructured":"Rieck, K., Laskov, P.: Linear-time computation of similarity measures for sequential data. J. Mach. Learn. Res. 9, 23\u201348 (2008)","journal-title":"J. Mach. Learn. Res."},{"key":"20_CR18","unstructured":"Liao, Y., Vemuri, V.R.: Using text categorization techniques for intrusion detection. In: Proceedings of Usenix Security Symposium, pp. 51\u201359 (2002)"},{"key":"20_CR19","doi-asserted-by":"crossref","unstructured":"Mahoney, M.V., Chan, P.K.: Learning rules for anomaly detection of hostile network traffic. In: Null, p. 601. IEEE (2003)","DOI":"10.1109\/ICDM.2003.1250987"},{"key":"20_CR20","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"crossref","first-page":"42","DOI":"10.1007\/978-3-540-74320-0_3","volume-title":"Recent Advances in Intrusion Detection","author":"KL Ingham","year":"2007","unstructured":"Ingham, K.L., Inoue, H.: Comparing anomaly detection techniques for HTTP. In: Kruegel, C., Lippmann, R., Clark, A. (eds.) RAID 2007. LNCS, vol. 4637, pp. 42\u201362. Springer, Heidelberg (2007)"},{"key":"20_CR21","doi-asserted-by":"crossref","unstructured":"Kruegel, C., Valeur, F., Vigna, G., Kemmerer, R.: Stateful intrusion detection for high-speed network\u2019s. In: 2002 IEEE Symposium on Security and Privacy, 2002, Proceedings, pp. 285\u2013293 (2002)","DOI":"10.1109\/SECPRI.2002.1004378"},{"key":"20_CR22","unstructured":"Wang, K., Stolfo, S.J.: One-class training for masquerade detection. In: IEEE Conference Data Mining Workshop on Data Mining for Computer Security (2003)"},{"key":"20_CR23","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"crossref","first-page":"74","DOI":"10.1007\/11790754_5","volume-title":"Detection of Intrusions and Malware & Vulnerability Assessment","author":"K Rieck","year":"2006","unstructured":"Rieck, K., Laskov, P.: Detecting unknown network attacks using language models. In: B\u00fcschkes, R., Laskov, P. (eds.) DIMVA 2006. LNCS, vol. 4064, pp. 74\u201390. Springer, Heidelberg (2006)"},{"key":"20_CR24","series-title":"Lecture Notes in Computer Science","first-page":"226","volume-title":"Recent Advances in Intrusion Detection","author":"K Wang","year":"2006","unstructured":"Wang, K., Parekh, J.J., Stolfo, S.J.: Anagram: a content anomaly detector resistant to mimicry attack. In: Zamboni, D., Kruegel, C. (eds.) RAID 2006. LNCS, vol. 4219, pp. 226\u2013248. Springer, Heidelberg (2006)"},{"key":"20_CR25","doi-asserted-by":"crossref","unstructured":"Kruegel, C., Vigna, G.: Anomaly detection of web-based attacks. In: ACM Conference on Computer and Communications Security, pp. 251\u2013261 (2003)","DOI":"10.1145\/948109.948144"},{"key":"20_CR26","doi-asserted-by":"crossref","unstructured":"Krueger, T., Gehl, C., Rieck, K., Laskov, P.: An architecture for inline anomaly detection. In: 2008 European Conference on Computer Network Defense, pp. 11\u201318 (2008)","DOI":"10.1109\/EC2ND.2008.8"},{"key":"20_CR27","doi-asserted-by":"crossref","first-page":"61","DOI":"10.1145\/1127345.1127348","volume":"9","author":"D Mutz","year":"2006","unstructured":"Mutz, D., Valeur, F., Vigna, G., Kruegel, C.: Anomalous system call detection. ACM Trans. Inf. Syst. Secur. 9, 61\u201393 (2006)","journal-title":"ACM Trans. Inf. Syst. Secur."},{"key":"20_CR28","doi-asserted-by":"crossref","unstructured":"Valeur, F., Mutz, D., Vigna, G.: A learning-based approach to the detection of SQL attacks. In: International Conference on Detection of Intrusions & Malware, pp. 123\u2013140 (2005)","DOI":"10.1007\/11506881_8"},{"key":"20_CR29","doi-asserted-by":"crossref","unstructured":"Pang, R., Paxson, V., Sommer, R., Peterson, L.: binpac: a yacc for writing application protocol parsers. In: ACM SIGCOMM Conference on Internet Measurement, pp. 289\u2013300 (2006)","DOI":"10.1145\/1177080.1177119"},{"key":"20_CR30","unstructured":"Borisov, N., Brumley, D.J., Wang, H.J., Dunagan, J., Joshi, P., Guo, C.: Generic application-level protocol analyzer and its language. In: Annual Network and Distributed System Security Symposium (2005)"},{"key":"20_CR31","unstructured":"Wondracek, G., Comparetti, P.M., Kr\u00fcgel, C., Kirda, E.: Automatic network protocol analysis. In: Proceedings of the 15th Annual Network and Distributed System Security Symposium (NDSS 2008) (2008)"},{"key":"20_CR32","doi-asserted-by":"crossref","first-page":"11994","DOI":"10.1016\/j.eswa.2009.05.029","volume":"36","author":"C-F Tsai","year":"2009","unstructured":"Tsai, C.-F., Hsu, Y.-F., Lin, C.-Y., Lin, W.-Y.: Intrusion detection by machine learning: a review. Expert Syst. Appl. 36, 11994\u201312000 (2009)","journal-title":"Expert Syst. Appl."},{"key":"20_CR33","doi-asserted-by":"crossref","first-page":"13492","DOI":"10.1016\/j.eswa.2012.07.009","volume":"39","author":"L Koc","year":"2012","unstructured":"Koc, L., Mazzuchi, T.A., Sarkani, S.: A network intrusion detection system based on a Hidden Na\u00efve Bayes multiclass classifier. Expert Syst. Appl. 39, 13492\u201313500 (2012)","journal-title":"Expert Syst. Appl."},{"key":"20_CR34","doi-asserted-by":"crossref","first-page":"55","DOI":"10.1016\/j.eswa.2009.05.023","volume":"37","author":"YT Hou","year":"2010","unstructured":"Hou, Y.T., Chang, Y., Chen, T., Laih, C.S., Chen, C.M.: Malicious web content detection by machine learning. Expert Syst. Appl. 37, 55\u201360 (2010)","journal-title":"Expert Syst. Appl."},{"key":"20_CR35","doi-asserted-by":"crossref","first-page":"1822","DOI":"10.1016\/j.eswa.2011.08.068","volume":"39","author":"CA Catania","year":"2012","unstructured":"Catania, C.A., Bromberg, F., Garino, C.G.: An autonomous labeling approach to support vector machines algorithms for network traffic anomaly detection. Expert Syst. Appl. 39, 1822\u20131829 (2012)","journal-title":"Expert Syst. Appl."},{"key":"20_CR36","doi-asserted-by":"crossref","first-page":"3899","DOI":"10.1016\/j.eswa.2011.06.033","volume":"39","author":"I Kang","year":"2012","unstructured":"Kang, I., Jeong, M.K., Kong, D.: A differentiated one-class classification method with applications to intrusion detection. Expert Syst. Appl. 39, 3899\u20133905 (2012)","journal-title":"Expert Syst. Appl."},{"key":"20_CR37","doi-asserted-by":"crossref","first-page":"7242","DOI":"10.1016\/j.eswa.2013.06.074","volume":"40","author":"GL Grinblat","year":"2013","unstructured":"Grinblat, G.L., Uzal, L.C., Granitto, P.M.: Abrupt change detection with one-class time-adaptive support vector machines. Expert Syst. Appl. 40, 7242\u20137249 (2013)","journal-title":"Expert Syst. Appl."},{"key":"20_CR38","doi-asserted-by":"crossref","first-page":"5916","DOI":"10.1016\/j.eswa.2013.05.021","volume":"40","author":"Y Sahin","year":"2013","unstructured":"Sahin, Y., Bulkan, S., Duman, E.: A cost-sensitive decision tree approach for fraud detection. Expert Syst. Appl. 40, 5916\u20135923 (2013)","journal-title":"Expert Syst. Appl."},{"key":"20_CR39","doi-asserted-by":"crossref","first-page":"5605","DOI":"10.1016\/j.eswa.2008.06.138","volume":"36","author":"SY Wu","year":"2009","unstructured":"Wu, S.Y., Yen, E.: Data mining-based intrusion detectors. Expert Syst. Appl. 36, 5605\u20135612 (2009)","journal-title":"Expert Syst. Appl."},{"key":"20_CR40","unstructured":"Devaraju, S.: Detection of accuracy for intrusion detection system using neural network classifier. In: International Conference on Information, Systems and Computing-ICISC, pp. 1028\u20131041 (2013)"},{"key":"20_CR41","doi-asserted-by":"crossref","first-page":"1431","DOI":"10.1016\/j.eswa.2009.06.059","volume":"37","author":"HC Wu","year":"2010","unstructured":"Wu, H.C., Huang, S.H.S.: Neural networks-based detection of stepping-stone intrusion. Expert Syst. Appl. 37, 1431\u20131437 (2010)","journal-title":"Expert Syst. Appl."},{"key":"20_CR42","first-page":"7162","volume":"37","author":"SM Min","year":"2010","unstructured":"Min, S.M., Sohn, S.Y., Ju, Y.H.: Random effects logistic regression model for anomaly detection. Pharmacol. Biochem. Behav. 37, 7162\u20137166 (2010)","journal-title":"Pharmacol. Biochem. Behav."},{"key":"20_CR43","doi-asserted-by":"crossref","first-page":"12521","DOI":"10.1016\/j.eswa.2011.04.038","volume":"38","author":"G Davanzo","year":"2011","unstructured":"Davanzo, G., Medvet, E., Bartoli, A.: Anomaly detection techniques for a web defacement monitoring service. Expert Syst. Appl. 38, 12521\u201312530 (2011)","journal-title":"Expert Syst. Appl."},{"key":"20_CR44","doi-asserted-by":"crossref","first-page":"127","DOI":"10.1016\/j.future.2013.06.027","volume":"37","author":"W Feng","year":"2014","unstructured":"Feng, W., Zhang, Q., Hu, G., Huang, J.X.: Mining network data for intrusion detection through combining SVMs with ant colony networks. Future Gener. Comput. Syst. 37, 127\u2013140 (2014)","journal-title":"Future Gener. Comput. Syst."},{"key":"20_CR45","first-page":"29","volume":"4","author":"R Ranjan","year":"2014","unstructured":"Ranjan, R., Sahoo, G.: A new clustering approach for anomaly intrusion detection. Eprint Arxiv 4, 29\u201338 (2014)","journal-title":"Eprint Arxiv"},{"key":"20_CR46","doi-asserted-by":"crossref","first-page":"5895","DOI":"10.1016\/j.eswa.2013.05.001","volume":"40","author":"DM Farid","year":"2013","unstructured":"Farid, D.M., Zhang, L., Hossain, A., Rahman, C.M., Strachan, R., Sexton, G., Dahal, K.: An adaptive ensemble classifier for mining concept drifting data streams. Expert Syst. Appl. 40, 5895\u20135906 (2013)","journal-title":"Expert Syst. Appl."},{"key":"20_CR47","doi-asserted-by":"crossref","first-page":"16","DOI":"10.1109\/2945.468391","volume":"1","author":"RA Becker","year":"1995","unstructured":"Becker, R.A., Eick, S.G., Wilks, A.R.: Visualizing network data. IEEE Trans. Visual. Comput. Graph. 1, 16\u201328 (1995)","journal-title":"IEEE Trans. Visual. Comput. Graph."},{"key":"20_CR48","unstructured":"Girardin, L., Brodbeck, D.: A visual approach for monitoring logs. In: LISA, pp. 299\u2013308 (2001)"},{"key":"20_CR49","doi-asserted-by":"crossref","first-page":"181","DOI":"10.1007\/s12650-014-0213-6","volume":"17","author":"Y Zhao","year":"2014","unstructured":"Zhao, Y., Liang, X., Fan, X., Wang, Y., Yang, M., Zhou, F.: MVSec: multi-perspective and deductive visual analytics on heterogeneous network security data. J. Visual. 17, 181\u2013196 (2014)","journal-title":"J. Visual."},{"key":"20_CR50","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"crossref","first-page":"111","DOI":"10.1007\/978-3-540-85933-8_11","volume-title":"Visualization for Computer Security","author":"F Fischer","year":"2008","unstructured":"Fischer, F., Mansmann, F., Keim, D.A., Pietzko, S., Waldvogel, M.: Large-scale network monitoring for visual analysis of attacks. In: Goodall, J.R., Conti, G., Ma, K.-L. (eds.) VizSec 2008. LNCS, vol. 5210, pp. 111\u2013118. Springer, Heidelberg (2008)"},{"key":"20_CR51","doi-asserted-by":"crossref","unstructured":"Tsigkas, O., Thonnard, O., Tzovaras, D.: Visual spam campaigns analysis using abstract graphs representation. In: Proceedings of the Ninth International Symposium on Visualization for Cyber Security, pp. 64\u201371. ACM (2012)","DOI":"10.1145\/2379690.2379699"},{"key":"20_CR52","first-page":"58","volume":"2","author":"DA Keim","year":"2012","unstructured":"Keim, D.A., Rossi, F., Seidl, T., Verleysen, M., Wrobel, S., Seidl, T.: Information visualization, visual data mining and machine learning. Dagstuhl Rep. 2, 58\u201383 (2012)","journal-title":"Dagstuhl Rep."},{"key":"20_CR53","unstructured":"Schulz, A., Gisbrecht, A., Bunte, K., Hammer, B.: How to visualize a classifier. In: New Challenges in Neural Computation, pp. 73\u201383 (2012)"},{"key":"20_CR54","doi-asserted-by":"crossref","first-page":"27","DOI":"10.1007\/s11063-014-9394-1","volume":"42","author":"A Schulz","year":"2014","unstructured":"Schulz, A., Gisbrecht, A., Hammer, B.: Using discriminative dimensionality reduction to visualize classifiers. Neural Process. Lett. 42, 27\u201354 (2014)","journal-title":"Neural Process. Lett."},{"key":"20_CR55","series-title":"Advances in Intelligent Systems and Computing","doi-asserted-by":"crossref","first-page":"39","DOI":"10.1007\/978-3-319-12610-4_3","volume-title":"Pattern Recognition Applications and Methods","author":"A Gisbrecht","year":"2015","unstructured":"Gisbrecht, A., Schulz, A., Hammer, B.: Discriminative dimensionality reduction for the visualization of classifiers. In: Fred, A., De Marsico, M. (eds.) ICPRAM 2013. AISC, vol. 318, pp. 39\u201356. Springer, Heidelberg (2015)"},{"key":"20_CR56","doi-asserted-by":"crossref","unstructured":"Amershi, S., Lee, B., Kapoor, A., Mahajan, R., Christian, B.: CueT: human-guided fast and accurate network alarm triage. In: Proceedings of the SIGCHI Conference on Human Factors in Computing Systems, pp. 157\u2013166. ACM (2011)","DOI":"10.1145\/1978942.1978966"},{"key":"20_CR57","doi-asserted-by":"crossref","unstructured":"Kapoor, A., Lee, B., Tan, D., Horvitz, E.: Interactive optimization for steering machine classification. In: SIGCHI Conference on Human Factors in Computing Systems, pp. 1343\u20131352 (2010)","DOI":"10.1145\/1753326.1753529"},{"key":"20_CR58","doi-asserted-by":"crossref","unstructured":"Amershi, S., Chickering, M., Drucker, S.M., Lee, B., Simard, P., Suh, J.: ModelTracker: redesigning performance analysis tools for machine learning. In: ACM Conference on Human Factors in Computing Systems, pp. 337\u2013346 (2015)","DOI":"10.1145\/2702123.2702509"},{"key":"20_CR59","unstructured":"Zhao, Q., Long, J., Fang, F., Cai, Z.: The important features of anomaly detection based on visualization technology. In: Proceedings of the 12th International Conference on Modeling Decisions for Artificial Intelligence (MDAI 2015), Skovde, Sweden (2015)"},{"key":"20_CR60","doi-asserted-by":"crossref","first-page":"433","DOI":"10.1002\/wics.101","volume":"2","author":"H Abdi","year":"2010","unstructured":"Abdi, H., Williams, L.J.: Principal component analysis. Wiley Interdisc. Rev. Comput. Stat. 2, 433\u2013459 (2010)","journal-title":"Wiley Interdisc. Rev. Comput. Stat."},{"key":"20_CR61","doi-asserted-by":"crossref","first-page":"159","DOI":"10.1016\/j.brainres.2007.01.040","volume":"1142","author":"JB Kruskal","year":"2007","unstructured":"Kruskal, J.B.: Multidimensional scaling by optimizing goodness of fit to a nonmetric hypothesis. Brain Res. 1142, 159\u2013168 (2007)","journal-title":"Brain Res."},{"key":"20_CR62","unstructured":"Saul, L.K., Roweis, S.T.: An Introduction to Locally Linear Embedding. Report at AT&T Labs \u2013 Research (2000)"},{"key":"20_CR63","doi-asserted-by":"crossref","first-page":"853","DOI":"10.1016\/j.patcog.2006.04.025","volume":"40","author":"H Choi","year":"2010","unstructured":"Choi, H., Choi, S.: Robust kernel Isomap. Pattern Recogn. 40, 853\u2013862 (2010)","journal-title":"Pattern Recogn."},{"issue":"3","key":"20_CR64","doi-asserted-by":"crossref","first-page":"417","DOI":"10.1109\/TC.2011.255","volume":"62","author":"Z Cai","year":"2013","unstructured":"Cai, Z., Wang, Z., Zheng, K., Cao, J.: A distributed TCAM coprocessor architecture for integrated longest prefix matching, policy filtering, and content filtering. IEEE Trans. Comput. 62(3), 417\u2013427 (2013)","journal-title":"IEEE Trans. Comput."},{"issue":"8","key":"20_CR65","first-page":"1334","volume":"46","author":"J Chen","year":"2009","unstructured":"Chen, J., Yin, J., Liu, Y., Cai, Z., Li, M.: Detecting distributed denial of service attack based on address correlation value. J. Comput. Res. Dev. 46(8), 1334\u20131340 (2009)","journal-title":"J. Comput. Res. Dev."},{"issue":"4","key":"20_CR66","first-page":"51","volume":"18","author":"F Liu","year":"2004","unstructured":"Liu, F., Dai, K., Wang, Z., Cai, Z.: Research on the technology of quantitative security evaluation based on fuzzy number arithmetic operation. Fuzzy Syst. Math. 18(4), 51\u201354 (2004)","journal-title":"Fuzzy Syst. Math."}],"container-title":["Lecture Notes in Computer Science","Modeling Decisions for Artificial Intelligence"],"original-title":[],"link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-319-45656-0_20","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2017,6,24]],"date-time":"2017-06-24T18:09:16Z","timestamp":1498327756000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/978-3-319-45656-0_20"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2016]]},"ISBN":["9783319456553","9783319456560"],"references-count":66,"URL":"https:\/\/doi.org\/10.1007\/978-3-319-45656-0_20","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2016]]}}}