{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,3,26]],"date-time":"2025-03-26T11:02:18Z","timestamp":1742986938428,"version":"3.40.3"},"publisher-location":"Berlin, Heidelberg","reference-count":9,"publisher":"Springer Berlin Heidelberg","isbn-type":[{"type":"print","value":"9783540236313"},{"type":"electronic","value":"9783540301844"}],"license":[{"start":{"date-parts":[[2004,1,1]],"date-time":"2004-01-01T00:00:00Z","timestamp":1072915200000},"content-version":"unspecified","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2004]]},"DOI":"10.1007\/978-3-540-30184-4_17","type":"book-chapter","created":{"date-parts":[[2010,9,23]],"date-time":"2010-09-23T15:27:01Z","timestamp":1285255621000},"page":"196-207","source":"Crossref","is-referenced-by-count":1,"title":["Spotting Intrusion Scenarios from Firewall Logs Through a Case-Based Reasoning Approach"],"prefix":"10.1007","author":[{"given":"F\u00e1bio Elias","family":"Locatelli","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Luciano Paschoal","family":"Gaspary","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Cristina","family":"Melchiors","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Samir","family":"Lohmann","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Fabiane","family":"Dillenburg","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","reference":[{"key":"17_CR1","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"85","DOI":"10.1007\/3-540-45474-8_6","volume-title":"Recent Advances in Intrusion Detection","author":"H. Debar","year":"2001","unstructured":"Debar, H., Wespi, A.: Aggregation and correlation of intrusion-detection alerts. In: Lee, W., M\u00e9, L., Wespi, A. (eds.) RAID 2001. LNCS, vol.\u00a02212, pp. 85\u2013103. Springer, Heidelberg (2001)"},{"key":"17_CR2","doi-asserted-by":"crossref","unstructured":"Esmaili, M., et al.: Case-Based Reasoning for Intrusion Detection. In: Computer Security Applications Conference, pp. 214\u2013223 (1996)","DOI":"10.1109\/CSAC.1996.569702"},{"key":"17_CR3","doi-asserted-by":"publisher","DOI":"10.1016\/B978-1-55860-237-3.50005-4","volume-title":"Case-Based Reasoning","author":"J. Kolodner","year":"1993","unstructured":"Kolodner, J.: Case-Based Reasoning. Morgan Kaufmann, San Francisco (1993)"},{"key":"17_CR4","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"74","DOI":"10.1007\/3-540-36084-0_5","volume-title":"Recent Advances in Intrusion Detection","author":"P. Ning","year":"2002","unstructured":"Ning, P., Cui, Y., Reeves, D.: Analyzing Intensive Intrusion Alerts via Correlation. In: Wespi, A., Vigna, G., Deri, L. (eds.) RAID 2002. LNCS, vol.\u00a02516, pp. 74\u201394. Springer, Heidelberg (2002)"},{"key":"17_CR5","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"95","DOI":"10.1007\/3-540-36084-0_6","volume-title":"Recent Advances in Intrusion Detection","author":"P.A. Porras","year":"2002","unstructured":"Porras, P.A., Fong, M.W., Valdes, A.: A Mission-Impact-Based Approach to INFOSEC Alarm Correlation. In: Wespi, A., Vigna, G., Deri, L. (eds.) RAID 2002. LNCS, vol.\u00a02516, pp. 95\u2013114. Springer, Heidelberg (2002)"},{"key":"17_CR6","doi-asserted-by":"crossref","unstructured":"Schwartz, D., Stoecklin, S., Yilmaz, E.: A Case-Based Approach to Network Intrusion Detection. In: Internacional Conference on Information Fusion, pp. 1084\u20131089 (2002)","DOI":"10.1109\/ICIF.2002.1020933"},{"key":"17_CR7","unstructured":"Symantec, Symantec Enterprise Firewall, Symantec Enterprise VPN, and Veloci-Raptor Firewall Appliance Reference Guide. Symantec (2001)"},{"key":"17_CR8","unstructured":"Symantec, Symantec Security Response (2003)"},{"issue":"1","key":"17_CR9","doi-asserted-by":"publisher","first-page":"138","DOI":"10.1145\/885651.781045","volume":"31","author":"V. Yegneswaran","year":"2003","unstructured":"Yegneswaran, V., Barford, P., Ulrich, J.: Internet Intrusions: Global Characteristics and Prevalence. ACM SIGMETRICS Performance Evaluation Review\u00a031(1), 138\u2013147 (2003)","journal-title":"ACM SIGMETRICS Performance Evaluation Review"}],"container-title":["Lecture Notes in Computer Science","Utility Computing"],"original-title":[],"link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-540-30184-4_17","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2019,3,20]],"date-time":"2019-03-20T22:50:04Z","timestamp":1553122204000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/978-3-540-30184-4_17"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2004]]},"ISBN":["9783540236313","9783540301844"],"references-count":9,"URL":"https:\/\/doi.org\/10.1007\/978-3-540-30184-4_17","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"type":"print","value":"0302-9743"},{"type":"electronic","value":"1611-3349"}],"subject":[],"published":{"date-parts":[[2004]]}}}