{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2024,9,5]],"date-time":"2024-09-05T00:15:13Z","timestamp":1725495313519},"publisher-location":"Berlin, Heidelberg","reference-count":14,"publisher":"Springer Berlin Heidelberg","isbn-type":[{"type":"print","value":"9783540769279"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"DOI":"10.1007\/978-3-540-76929-3_23","type":"book-chapter","created":{"date-parts":[[2007,11,17]],"date-time":"2007-11-17T03:01:14Z","timestamp":1195268474000},"page":"247-253","source":"Crossref","is-referenced-by-count":6,"title":["A Comprehensive Approach to Detect Unknown Attacks Via Intrusion Detection Alerts"],"prefix":"10.1007","author":[{"given":"Jungsuk","family":"Song","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Hayato","family":"Ohba","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Hiroki","family":"Takakura","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yasuo","family":"Okabe","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Kenji","family":"Ohira","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yongjin","family":"Kwon","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","reference":[{"key":"23_CR1","doi-asserted-by":"publisher","first-page":"222","DOI":"10.1109\/TSE.1987.232894","volume":"13","author":"D.E. Denning","year":"1987","unstructured":"Denning, D.E.: An intrusion detection model. IEEE Transactions on Software Engineering, SE\u00a013, 222\u2013232 (1987)","journal-title":"IEEE Transactions on Software Engineering, SE"},{"key":"23_CR2","unstructured":"http:\/\/www.snort.org\/"},{"issue":"4","key":"23_CR3","doi-asserted-by":"publisher","first-page":"571","DOI":"10.1016\/S1389-1286(00)00138-9","volume":"34","author":"S. Manganaris","year":"2000","unstructured":"Manganaris, S., Christensen, M., Zerkle, D., Hermiz, K.: A Data Mining Analysis of RTID Alarms. Computer Networks\u00a034(4), 571\u2013577 (2000)","journal-title":"Computer Networks"},{"issue":"4","key":"23_CR4","doi-asserted-by":"publisher","first-page":"443","DOI":"10.1145\/950191.950192","volume":"6","author":"K. Julisch","year":"2003","unstructured":"Julisch, K.: Clustering Intrusion Detection Alarms to Support Root Cause Analysis. ACM Transactions on Information and System Security\u00a06(4), 443\u2013471 (2003)","journal-title":"ACM Transactions on Information and System Security"},{"key":"23_CR5","unstructured":"Zurutuza, U., Uribeetxeberria, R.: Intrusion Detection Alarm Correlation: A Survey. In: Proceedings of the IADAT International Conference on Telecommunications and Computer Networks (December 1-3, 2004)"},{"key":"23_CR6","first-page":"99","volume-title":"Communications of the ACM","author":"T. Bass","year":"2000","unstructured":"Bass, T.: Intrusion detection systems and multisensor data fusion. In: Communications of the ACM, pp. 99\u2013105. ACM Press, New York (2000)"},{"key":"23_CR7","series-title":"Lecture Notes in Artificial Intelligence","doi-asserted-by":"crossref","first-page":"184","DOI":"10.1007\/11510888_19","volume-title":"Machine Learning and Data Mining in Pattern Recognition","author":"G. Giacinto","year":"2005","unstructured":"Giacinto, G., Perdisci, R., Roli, F.: Alarm Clustering for Intrusion Detection Systems in Computer Networks. In: Perner, P., Imiya, A. (eds.) MLDM 2005. LNCS (LNAI), vol.\u00a03587, pp. 184\u2013193. Springer, Heidelberg (2005)"},{"key":"23_CR8","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1007\/11856214_1","volume-title":"Recent Advances in Intrusion Detection","author":"J.J. Treinen","year":"2006","unstructured":"Treinen, J.J., Thurimella, R.: A Framework for the Application of Association Rule Mining in Large Intrusion Detection Infrastructures. In: Zamboni, D., Kruegel, C. (eds.) RAID 2006. LNCS, vol.\u00a04219, pp. 1\u201318. Springer, Heidelberg (2006)"},{"key":"23_CR9","unstructured":"Symantec Network Security 7100 Series"},{"key":"23_CR10","unstructured":"http:\/\/www.support.microsoft.com\/kb\/921883"},{"key":"23_CR11","unstructured":"http:\/\/www.microsoft.com\/technet\/security\/bulletin\/MS05-027.mspx"},{"key":"23_CR12","unstructured":"http:\/\/www.sans.org\/resources\/idfaq\/rpc_evas.php"},{"key":"23_CR13","unstructured":"http:\/\/www.sophos.com\/security\/analyses\/w32allapleb.html"},{"issue":"1","key":"23_CR14","doi-asserted-by":"publisher","first-page":"84","DOI":"10.1109\/TCOM.1980.1094577","volume":"28","author":"Y. Linde","year":"1980","unstructured":"Linde, Y., Buzo, A., Gray, R.M.: An Algorithm for Vector Quantizer Design. IEEE Trans. on communications\u00a028(1), 84\u201395 (1980)","journal-title":"IEEE Trans. on communications"}],"container-title":["Lecture Notes in Computer Science","Advances in Computer Science \u2013 ASIAN 2007. Computer and Network Security"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-540-76929-3_23.pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2021,4,27]],"date-time":"2021-04-27T10:48:00Z","timestamp":1619520480000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/978-3-540-76929-3_23"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[null]]},"ISBN":["9783540769279"],"references-count":14,"URL":"https:\/\/doi.org\/10.1007\/978-3-540-76929-3_23","relation":{},"subject":[]}}