{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2024,9,5]],"date-time":"2024-09-05T12:46:16Z","timestamp":1725540376502},"publisher-location":"Berlin, Heidelberg","reference-count":21,"publisher":"Springer Berlin Heidelberg","isbn-type":[{"type":"print","value":"9783642051968"},{"type":"electronic","value":"9783642051975"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2009]]},"DOI":"10.1007\/978-3-642-05197-5_10","type":"book-chapter","created":{"date-parts":[[2009,11,2]],"date-time":"2009-11-02T09:20:49Z","timestamp":1257153649000},"page":"140-152","source":"Crossref","is-referenced-by-count":0,"title":["Aggregation and Thresholding Schemes for Anomaly-Based Approaches"],"prefix":"10.1007","author":[{"given":"Salem","family":"Benferhat","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Karim","family":"Tabia","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","reference":[{"issue":"2","key":"10_CR1","doi-asserted-by":"publisher","first-page":"145","DOI":"10.1109\/TKDE.2006.29","volume":"18","author":"F. Angiulli","year":"2006","unstructured":"Angiulli, F., Basta, S., Pizzuti, C.: Distance-based detection and prediction of outliers. IEEE Trans. on Knowl. and Data Eng.\u00a018(2), 145\u2013160 (2006)","journal-title":"IEEE Trans. on Knowl. and Data Eng."},{"key":"10_CR2","unstructured":"Axelsson, S.: Intrusion detection systems: A survey and taxonomy. Technical Report 99-15, Chalmers Univ. (2000)"},{"key":"10_CR3","unstructured":"Benferhat, S., Tabia, K.: Classification features for detecting server-side and client-side web attacks. In: 23rd International Security Conference, Italy (2008)"},{"issue":"2","key":"10_CR4","doi-asserted-by":"publisher","first-page":"222","DOI":"10.1109\/TSE.1987.232894","volume":"13","author":"D.E. Denning","year":"1987","unstructured":"Denning, D.E.: An intrusion-detection model. IEEE Trans. Softw. Eng.\u00a013(2), 222\u2013232 (1987)","journal-title":"IEEE Trans. Softw. Eng."},{"key":"10_CR5","unstructured":"Ert\u00f6z, L., Eilertson, E., Lazarevic, A., Tan, P.-N., Kumar, V., Srivastava, J., Dokas, P.: Minds - minnesota intrusion detection system"},{"key":"10_CR6","unstructured":"Gerhard M\u00fcnz, S.L., Carle, G.: Traffic anomaly detection using k-means clustering (2007)"},{"issue":"7","key":"10_CR7","doi-asserted-by":"publisher","first-page":"529","DOI":"10.1016\/j.cose.2005.06.008","volume":"24","author":"V. Gowadia","year":"2005","unstructured":"Gowadia, V., Farkas, C., Valtorta, M.: Paid: A probabilistic agent-based intrusion detection system. Computers & Security\u00a024(7), 529\u2013545 (2005)","journal-title":"Computers & Security"},{"issue":"3","key":"10_CR8","first-page":"197","volume":"20","author":"D. Heckerman","year":"1995","unstructured":"Heckerman, D., Geiger, D., Chickering, D.M.: Learning bayesian networks: The combination of knowledge and statistical data. Machine Learning\u00a020(3), 197\u2013243 (1995)","journal-title":"Machine Learning"},{"key":"10_CR9","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"42","DOI":"10.1007\/978-3-540-74320-0_3","volume-title":"Recent Advances in Intrusion Detection","author":"K.L. Ingham","year":"2007","unstructured":"Ingham, K.L., Inoue, H.: Comparing anomaly detection techniques for HTTP. In: Kruegel, C., Lippmann, R., Clark, A. (eds.) RAID 2007. LNCS, vol.\u00a04637, pp. 42\u201362. Springer, Heidelberg (2007)"},{"key":"10_CR10","unstructured":"Javits, H., Valdes, A.: The NIDES statistical component: Description and justification (1993)"},{"key":"10_CR11","volume-title":"An Introduction to Bayesian Networks","author":"F.V. Jensen","year":"1996","unstructured":"Jensen, F.V.: An Introduction to Bayesian Networks. UCL press, London (1996)"},{"key":"10_CR12","doi-asserted-by":"crossref","unstructured":"Kruegel, C., Mutz, D., Robertson, W., Valeur, F.: Bayesian event classification for intrusion detection. In: Proceedings of the 19th Annual Computer Security Applications Conference, USA, p. 14 (2003)","DOI":"10.1109\/CSAC.2003.1254306"},{"key":"10_CR13","doi-asserted-by":"crossref","unstructured":"Kruegel, C., Vigna, G.: Anomaly detection of web-based attacks. In: CCS 2003: Proceedings of the 10th ACM conference on Computer and communications security, New York, NY, USA, pp. 251\u2013261 (2003)","DOI":"10.1145\/948109.948144"},{"key":"10_CR14","doi-asserted-by":"crossref","unstructured":"Kruegel, C., Vigna, G., Robertson, W.: A multi-model approach to the detection of web-based attacks, vol.\u00a048, pp. 717\u2013738 (2005)","DOI":"10.1016\/j.comnet.2005.01.009"},{"key":"10_CR15","doi-asserted-by":"crossref","unstructured":"Krugel, C., Toth, T., Kirda, E.: Service specific anomaly detection for network intrusion detection. In: Proceedings of the 2002 ACM symposium on Applied computing, USA, pp. 201\u2013208 (2002)","DOI":"10.1145\/508791.508835"},{"key":"10_CR16","unstructured":"Lee, W., Xiang, D.: Information-theoretic measures for anomaly detection. In: Proceedings of the IEEE Symposium on Security and Privacy, USA (2001)"},{"key":"10_CR17","unstructured":"Neumann, P.G., Porras, P.A.: Experience with EMERALD to date. In: First USENIX Workshop on Intrusion Detection and Network Monitoring, Santa Clara, California, pp. 73\u201380 (1999)"},{"key":"10_CR18","unstructured":"Snort. Snort: The open source network intrusion detection system (2002), http:\/\/www.snort.org"},{"issue":"1-2","key":"10_CR19","doi-asserted-by":"crossref","first-page":"105","DOI":"10.3233\/JCS-2002-101-205","volume":"10","author":"S. Staniford","year":"2002","unstructured":"Staniford, S., Hoagland, J.A., McAlerney, J.M.: Practical automated detection of stealthy portscans. J. Comput. Secur.\u00a010(1-2), 105\u2013136 (2002)","journal-title":"J. Comput. Secur."},{"key":"10_CR20","doi-asserted-by":"crossref","unstructured":"Tombini, E., Debar, H., Me, L., Ducasse, M.: A serial combination of anomaly and misuse idses applied to http traffic. In: Proceedings of the 20th Annual Computer Security Applications Conference, pp. 428\u2013437 (2004)","DOI":"10.1109\/CSAC.2004.4"},{"key":"10_CR21","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"80","DOI":"10.1007\/3-540-39945-3_6","volume-title":"Recent Advances in Intrusion Detection","author":"A. Valdes","year":"2000","unstructured":"Valdes, A., Skinner, K.: Adaptive, model-based monitoring for cyber attack detection. In: Debar, H., M\u00e9, L., Wu, S.F. (eds.) RAID 2000. LNCS, vol.\u00a01907, pp. 80\u201392. Springer, Heidelberg (2000)"}],"container-title":["Communications in Computer and Information Science","e-Business and Telecommunications"],"original-title":[],"link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-642-05197-5_10.pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2020,11,24]],"date-time":"2020-11-24T02:49:12Z","timestamp":1606186152000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/978-3-642-05197-5_10"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2009]]},"ISBN":["9783642051968","9783642051975"],"references-count":21,"URL":"https:\/\/doi.org\/10.1007\/978-3-642-05197-5_10","relation":{},"ISSN":["1865-0929","1865-0937"],"issn-type":[{"type":"print","value":"1865-0929"},{"type":"electronic","value":"1865-0937"}],"subject":[],"published":{"date-parts":[[2009]]}}}