{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,3,28]],"date-time":"2025-03-28T08:29:46Z","timestamp":1743150586492,"version":"3.40.3"},"publisher-location":"Cham","reference-count":15,"publisher":"Springer International Publishing","isbn-type":[{"type":"print","value":"9783319696584"},{"type":"electronic","value":"9783319696591"}],"license":[{"start":{"date-parts":[[2017,1,1]],"date-time":"2017-01-01T00:00:00Z","timestamp":1483228800000},"content-version":"unspecified","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2017]]},"DOI":"10.1007\/978-3-319-69659-1_24","type":"book-chapter","created":{"date-parts":[[2017,10,19]],"date-time":"2017-10-19T08:44:47Z","timestamp":1508402687000},"page":"437-454","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":2,"title":["Visualization of Intrusion Detection Alarms Collected from Multiple Networks"],"prefix":"10.1007","author":[{"given":"Boyeon","family":"Song","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Sang-Soo","family":"Choi","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Jangwon","family":"Choi","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Jungsuk","family":"Song","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2017,10,20]]},"reference":[{"key":"24_CR1","unstructured":"Bidou, R.: Security Operation Center Concepts & Implementation, August 2005. http:\/\/www.iv2-technologies.com\/SOCConceptAndImplementation.pdf"},{"key":"24_CR2","unstructured":"D. Moore, C. Shannon, G.M.V., Savage, S.: Network telescopes: Technical report. Cooperative Association for Internet Data Analysis (CAIDA), July 2004"},{"key":"24_CR3","doi-asserted-by":"crossref","unstructured":"Inoue, D., Eto, M., Yoshioka, K., Baba, S., Suzuki, K., Nakazato, J., Ohtaka, K., Nakao, K.: nicter: An incident analysis system toward binding network monitoring with malware analysis. In: Information Security Threats Data Collection and Sharing, pp. 58\u201366, April 2008","DOI":"10.1109\/WISTDCS.2008.14"},{"key":"24_CR4","doi-asserted-by":"crossref","unstructured":"Lau, S.: The spinning cube of potential doom. Commun. ACM 47(6), 25\u201326 (2004). http:\/\/doi.acm.org\/10.1145\/990680.990699","DOI":"10.1145\/990680.990699"},{"key":"24_CR5","unstructured":"Moore, D.: Network telescopes observing small or distant security events. In: 11th USENIX Security Symposium, Invited talk, August 2003"},{"key":"24_CR6","doi-asserted-by":"crossref","unstructured":"Nunnally, T., Chi, P., Abdullah, K., Uluagac, A.S., Copeland, J.A., Beyah, R.: P3D: a parallel 3d coordinate visualization for advanced network scans. In: 2013 IEEE International Conference on Communications (ICC), pp. 2052\u20132057, June 2013","DOI":"10.1109\/ICC.2013.6654828"},{"key":"24_CR7","doi-asserted-by":"crossref","unstructured":"Onwubiko, C.: Cyber security operations centre: Security monitoring for protecting business and supporting cyber defense strategy. In: 2015 International Conference on Cyber Situational Awareness, Data Analytics and Assessment (CyberSA), pp. 1\u201310, June 2015","DOI":"10.1109\/CyberSA.2015.7166125"},{"issue":"23\u201324","key":"24_CR8","first-page":"2435","volume":"31","author":"V Paxson","year":"1999","unstructured":"Paxson, V.: Bro: a system for detecting network intruders in real-time. Comput. Netw. Int. J. Comput. Telecommun. Networking 31(23\u201324), 2435\u20132463 (1999)","journal-title":"Comput. Netw. Int. J. Comput. Telecommun. Networking"},{"key":"24_CR9","unstructured":"Rozekrans, T., M.M., de Koning, J.: Defending against DNS reflection amplification attacks. University of Amsterdam, Technical report, February 2013"},{"key":"24_CR10","volume-title":"Guide to Intrusion Detection and Prevention Systems (IDPS) - Recommendations of the National Institute of Standards and Technology","author":"K Scarfone","year":"2007","unstructured":"Scarfone, K., Mell, P.: Guide to Intrusion Detection and Prevention Systems (IDPS) - Recommendations of the National Institute of Standards and Technology. National Institute of Standards and Technology, Gaithersburg (2007)"},{"key":"24_CR11","unstructured":"Sequeira, D.: Intrusion Prevention Systems - Security\u2019s Silver Bullet? GSEC Version 1.4B. SANS Institute (2002)"},{"key":"24_CR12","unstructured":"Suzuki, K.: Studies on Network Monitoring Systems to Reveal Suspicious Activities. Ph.D. thesis, Graduate School of Informatics, Kyoto University (2011)"},{"key":"24_CR13","doi-asserted-by":"publisher","unstructured":"Taylor, T., Brooks, S., McHugh, J.: NetBytes Viewer: an entity-based netflow visualization utility for identifying intrusive behavior. In: Goodall, J.R., Conti, G., Ma, K.L. (eds.) VizSEC 2007: Proceedings of the Workshop on Visualization for Computer Security, pp. 101\u2013114. Springer, Heidelberg (2007). doi:10.1007\/978-3-540-78243-8_7","DOI":"10.1007\/978-3-540-78243-8_7"},{"key":"24_CR14","unstructured":"Vaughn, R., Evron, G.: DNS amplification attacks (preliminary release) (2006). http:\/\/packetstormsecurity.com\/files\/download\/44824\/DNS-Amplification-Attacks.pdf"},{"key":"24_CR15","unstructured":"Zimmerman, C.: Ten Strategies of a World-Class Cybersecurity Operations Center. MITRE Corporation (2014)"}],"container-title":["Lecture Notes in Computer Science","Information Security"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-319-69659-1_24","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,3,12]],"date-time":"2024-03-12T18:02:11Z","timestamp":1710266531000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-319-69659-1_24"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2017]]},"ISBN":["9783319696584","9783319696591"],"references-count":15,"URL":"https:\/\/doi.org\/10.1007\/978-3-319-69659-1_24","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"type":"print","value":"0302-9743"},{"type":"electronic","value":"1611-3349"}],"subject":[],"published":{"date-parts":[[2017]]},"assertion":[{"value":"20 October 2017","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"ISC","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"International Conference on Information Security","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Ho Chi Minh City","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Vietnam","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2017","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"22 November 2017","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"24 November 2017","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"20","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"isw2017","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"http:\/\/isc2017.vgu.edu.vn\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}}]}}